| Commit message (Collapse) | Author | Age |
|---|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Add an SPKI pin for Cloudflare to help prevent MITM and downgrade attacks,
as described in RFC7858 (DNS over TLS). The setup of SPKI and the specific
SHA256 certificate hash are taken from Cloudflare's DoT configuration guide
published at https://developers.cloudflare.com/1.1.1.1/dns-over-tls/.
Note that the certificate is valid to March 25th 2020, 13:00 CET, which
provides ample time for issuance of a backup pin to support future key
rollover.
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
| |
|
|
| |
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
| |
|
|
|
|
|
|
| |
Retain the upstream value since privacy is usually the key user motivation
for using DNS-over-TLS, and simply note that those encountering sub-optimal
routing may consider disabling the setting.
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
|
| |
|
|
|
|
| |
Update to new upstream version. Also changed to Cloudflare's DNS as default.
Signed-off-by: David Mora <iamperson347+public@gmail.com>
|
| |
|
|
|
|
| |
Bump version plus changes to address concerns regarding default config for stubby provided with this package
Signed-off-by: David Mora <iamperson347+public@gmail.com>
|
|
|
(This daemon utilizes the getdns library)
Signed-off-by: David Mora <iamperson347+public@gmail.com>
|